A VPN inside one instance
Installing the hide.me client in an instance, and exactly whose traffic it covers.
On this page 3 sections
The Sandbox tab can install the hide.me VPN client inside one instance. What it covers is the important part.
It covers that instance, and nothing else#
That is also what makes it useful: one instance can be somewhere else while everything else on your Mac carries on normally.
What MSL does and does not do#
| MSL does | MSL does not |
|---|---|
| Install the official client, at a pinned version whose exact contents it checks | Handle your account, password or access token |
| Report whether the client is installed, whether the kernel can do WireGuard, whether you are logged in and whether a tunnel is up | Wrap the client's own commands in a button |
| Tell you the next step, in the client's own words | Connect or disconnect for you |
Connecting is you, in your own instance, with your own credentials:
sudo hide.me token <server>
sudo hide.me connect <server>The card tells you which of those is next.
The checks it reports#
| Check | Why it matters |
|---|---|
| Installed | The client is present in the instance. |
| WireGuard | The instance's kernel can carry the tunnel. Without it the client cannot connect at all. |
| Logged in | An access token is present. |
| Connected | A tunnel interface exists right now. |
WireGuard is checked before you get as far as an account, because finding out afterwards is a poor way to spend ten minutes.